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ABSTRACT 



A method of operating a network device in a communication 
system for the transmission of data packets which include 
network addresses identifying sources and destinations of 
data, the network device being capable of both bridging and 
routing decisions and including a forwarding database by 
means of which a packet including network address data can 
be forwarded to at least one port and thereby to at least one 
network path identified by a network address, and packets 
can be forwarded to at least one port in response to a media 
access control address. The method comprises establishing a 
data table which contains entries comprising a network 
address of an end station to which a packet is destined, a 
respective media access control address and an identification 
of at least one port to which the packet will be directed 
within the device. The table is accessed in response to 
network addresses and media access control addresses, 
whereby the same table can be used for both routing and 
bridging decisions. 

9 Claims, 5 Drawing Sheets 
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INTEGRATED DATA TABLE IN A NETWORK address on the packet as the packet leaves the router. To 

enable this mapping, the router has recourse to a table 
known as an ARP (address resolution protocol) cache, by 
BACKGROUND OF THE INVENTION means of which a record is maintained of mappings between 

1 c- u r*u y 5 network addresses, such as EP (internet protocol) addresses, 

1. Held of the Invention ^ , * i jj 

and media access control addresses. 
The present invention relates to the storage of data in where , routi taWe ^^Its an end station cache (in 
network devices tor packet-based data communication sys- ticulaf tQ achieve ^ look } ^ e ^ 

terns wherein data is transmitted in daU packets that include h x(.im+v + p), where X is the maximum number of entries 
headers wntammg address data by means of which packets 10 m mc ub , C( m is ^ number of bits in „ MAC add • 

are switched or routed to the it ultimate destinations. • , ri_-* • . i TTk , , ."7 

is the number of bits in a network or IP address, v is the 

2. Description of Related Art number of bits in VLAN address, and p is the number of bits 
Address data in data packets fall into two broad catego- in a port mask. Typically, m-48, i-32, v-5 and p-32. The 

ries. A first category is conventionally termed * network storage capacity required of an ARP cache is X(m+i), the 

addresses' and relates to the source and intended destination 15 symbols in this expression having the meanings already 

network of a packet. These are 'layer 3* addresses in the indicated. 

customary OSI layering model. A second category is termed A bridge is used to connect one LAN to another, so that 

'media access control* address data, abbreviated to MAC users connected to different LANs can communicate as if 

addresses. These addresses, layer 2 addresses in the OSI they were on the same LAN. For this purpose the bridge 

model, relate to the devices within the communication 20 mere iy switches packets from one port to another. It 

system and are used by network devices to perform bridging. responds to a MAC address and a VLAN address to look up 

Two common network devices are called routers and the relevant port mask, 

bridges. They both comprise a multiplicity of ports, a It is customary (as described in for example EP-A- 

switching function (usually constituted by an application- 0365337) to include in a bridging table an 'age' field which 

specific integrated circuit or ASIC) and a forwarding data- 25 is constituted by the value of an artificial age at the time the 

base. The latter is compiled by reading 'source* addresses entry was made. The artificial age may be changed from time 

from incoming packets and storing them in a table along to time in an alternating or cyclic sequence. The interval 

with an identification of the respective port on which the between changes may be selected or adapted to the data 

packet was received. Such a table is used by a look-up traffic flow. The age field enables the clearing of unwanted 

engine to determine a port from which to dispatch a packet 30 'old' entries from the table in a single operation, the entries 

having a 'destination' address corresponding to a 'source' which have an age field not corresponding to a current age 

address in the table. As will be seen, such 'source* and being removed from the table. 

'destination' address may be addresses in either of the The storage required for a bridging table is X(m+v+p+a) 

aforementioned categories. ^ whcrc ^ m> v ^ p relatc to me number of entrics> thc 

If the device receives a packet of which the destination MAC address, the VLAN address and the port mask respec- 
address is not in the look-up table (the forwarding database) tively. The age field a may be one or two bits, 
it is necessary to broadcast the packet so that an acknowl- 
edgement from the destination can be used to resolve the SUMMARY OF THE INVENTION 
address. Since the broadcast of packets consumes substantial ^ The present invention is particularly concerned with the 
bandwidth (i.e. information-carrying capacity) it is known to management of data storage for a device which can function 
partition networks into sub-nets or virtual local area net- both as a router and a bridge. It may be seen from the 
works (VLANs) whereby the broadcast of packets can be foregoing that a simple combination of the ordinary fiinc- 
limited to one VLAN. dons of a router and bridge would require data storage 

Both bridges and routers customarily include various 45 corresponding to X(3m+2i+2v+2p+a), both bridges and 

buffering, contention resolution and flow control functions routers require for their operation response to MAC 

which are well known to those skilled in the art and which addresses and in addition a router needs to map between 

will not be described further herein. Both bridges and routers network addresses and MAC addresses, 

and related concepts, such as sub-nets, VLAN's etc, are well The basis of the present invention is the use of an address 

described in the prior art, such as W096/34474, GB-A- 50 cache which is based on network addresses of end stations. 

2283645, U.S. Pat. No. 5,027,350 and EP-A-0841782. An address cache thus organised may be constituted by a 

However, bridges and routers (which terms are used to single data table and will, as the following indicates, greatly 

denote the respective functions, since devices which per- reduce the storage requirements for separate routing and 

form both functions are available) enable somewhat differ- bridging functions. 

ent functions. Routers, as the name implies, are used to look 55 In order to access such an 'integrated' cache, the device 

up a route to another network or sub-network. They make a needs to be able to respond to both MAC (layer 2) addresses 

decision which answers the question: 'To which network and network (layer 3) addresses and a further aspect of the 

should the packet be sent?' . For this purpose the forwarding invention is a process which enables the device to act in such 

database needs to relate an identification of the subnet, via a manner. 

a network address sometimes termed VLAN address, and an 60 nPTAir Fn HF^PPT PTIOM of thf np AWiwr q 

identification, conveniently termed a port mask, of the port DETAILED DESCRIPTION OF THE DRAWINGS 

to which the sub-net is directly or indirectly connected. In FIG. 1 illustrates a network device including a combined 

general, a router does not need knowledge of an end station table according to the invention; 

address in its forwarding database. If however a router has FIG. 2 illustrates separately organised routing and bridg- 

to direct a packet to an end station in a directly connected 65 ing tables and an ARP cache; 

sub-net the router needs to map the network address of the FIG. 3 illustrates hash tables and a combined table in 

end station to its MAC address, and to place the MAC more detail; 
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FIG. 4 illustrates a first look-up process using 'layer 2' 
addresses; and 

FIG. 5 illustrates a second look-up process using 'layer 3' 
addresses. 

DETAILED DESCRIPTION OF EXEMPLARY 
EMBODIMENTS OF THE INVENTION 

FIG. 1 of the drawings illustrates a network device 1 
which can perform both as a bridge and a router. Most of the 
functions of the device are common to known devices and 
therefore need no detailed description. For example, EP-A- 
0841782 describes a level-3 network switch which is 
capable of both routing and bridging functions, and com- 
prises a separate ARP cache and MAC address look-up table. 

The device 1 includes a multiplicity of ports 2 connected 
by way of lines or links to other network devices (not 
shown). Data packets received at the ports 2 include address 
and other data which is read by operation of an ASIC 3 while 
the packets are temporarily stored in a buffer (not explicitly 
shown) pending dispatch on a port or ports. In particular the 
device includes a forwarding database which contains 
entries relating source data of an incoming packet and the 
port on which the packet was received. The port on which a 
packet is to be dispatched is obtained by means of a look-up 
engine 8 which attempts to locate a match between the 
destination data of a packet and source data in the table. If 
no match be found, it is generally necessary to broadcast the 
packet. The source data and destination data required for the 
forwarding database differ according as the device acts as a 
bridge or a router. 

It may be remarked that it is customary to employ a 
hashing algorithm on address data to access a look-up table. 
The use of hashing is described in the above-mentioned VS. 
Pat. No. 5,027,350 to Marshall, issued Jun. 25, 1991, and 
need not be described herein. 

Before the remainder of FIG. 1 is described, reference 
will be made to FIG. 2, which illustrates three types of 
databases used in routers or bridges according to the state of 
the art. Reference 5 denotes a routing table typically con- 
taining X entries, each of which consists of an MAC address, 
an IP address, a VLAN address and a port mask. Such a table 
is employed to store MAC addresses that the device has 
previously obtained and to forward unicast packets to such 
addresses. 

The reference 6 denotes, a bridging table containing 
entries each comprising an MAC address, a VLAN address, 
a port mask and an age field. 

The reference 7 illustrates an ARP (address resolution 
protocol) cache, comprising MAC addresses and network 
(IP) addresses, needed for the mapping discussed above. The 
use of an ARP cache is described in the aforementioned 
EP-A-0841782. 

Reverting now to FIG. 1, which illustrates a network 
device intended for routing and bridging, the device includes 
an integrated address cache 9 in place of the separate routing 
and bridging tables 5 and 6 and ARP cache as shown in FIG. 
1. The single address cache 9 can hold a multiplicity of 
entries each comprising an address cache 9 according to the 
invention disposed within the device a MAC address, a 
network (IP) address, a VLAN address, a port mask and, 
preferably, an age field. 

The address cache may be accessed (by means of bashing 
if desired) from either a network address or a MAC address 
within a received packet. 

It may be observed that the storage required for X entries 
in a table according to FIG. 1 is X(m+i+v+p+a) compared 
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with X(3m+2i+2v+2p+a), the storage required for bridging 
and routing functions based on an MAC address cache with 
a mapping of address resolution protocol mappings as may 
be required for the router. There is accordingly a substantial 
5 saving in storage requirements. 

FIG. 1 illustrates only the switching ASIC (with look-up) 
and the associated data table which includes the layer 2 and 
layer 3 (and other) data. Since look-ups using either layer 2 
addresses or layer 3 addresses will be required, the present 

10 embodiment employs two hash tables, one of which is 
accessed by hashing the relevant MAC address and VLAN 
number of an incoming packet, the other being accessed 
using the relevant IP address of the incoming packet. The 
device needs to make a prior decision, as described below, 

1S on which look-up it should perform. Before the relevant 
processes are described, reference should be first made to 
FIG. 3, which illustrates a specific example of hash tables 
and an associated data table 9. 
In FIG. 3, the MAC address and VLAN number of an 

20 incoming packet are represented by block 30, and are 
constituted by a 55-bit wide word input to a hash function 31 
which hashes the combined MAC/VLAN address to a 15-bit 
wide word accessing first hash table 32. Each entry in the 
hash table is 16 bits wide. Bit 15 of each entry indicates, if 

25 T, that there is a valid entry, if bit 15 is '0* the table entry 
is empty. In this example bit 14 is unused. Bits [13:0] 
constitute a pointer to an entry in the associated data table 9. 
Similarly, an IP address is represented by block 33 and 

30 constituted by a 32-bit wide input to a hashing function 34, 
which hashes the IP address to a 15-bit wide entry for second 
hash table 35. This is organised similarly to table 32. In this 
example the tables 32 and 35 can contain 128K entries. 
The associated data table 9 may be constituted by a single 

35 internal DRAM block, with two interleaved banks capable 
of supporting 16K layer 2 and 16K layer 3 addresses. 

If an entry in table 9 is a unicast entry (as shown in 
simplified form in FIG. 3), it may be defined as follows: 
Bit 127 is unused. Bits 126:79 are a MAC address. Bits 

40 78:47 are an IP address. Bits 47:39 are a VLAN number. Bits 
38:34 are a destination port number. Bit 33 is an age bit. Bit 
32 is a 'perm' bit. Bits 31:28 are miscellaneous utility bits. 
Bits 27:14 constitute a layer 3 link pointer (to the next entry 
in a chain). Bits 13:0 constitute a layer 2 link pointer. The 

45 use of link pointers in tables accessed by way of a hashing 
process is well known and need not be described in detail. 

The table 9 may also support a multicast entry which may 
be defined as follows: 

50 Bits 127:101 are unused. Bits 100:54 constitute a MAC 
address. Bits 53:46 constitute a VLAN address. Bit 45 is an 
age bit. Bit 44 is a 'perm' bit. Bits 43:18 are a destination bit 
mask. Bits 17:14 are miscellaneous utility bits. Bits 13:0 
constitute a layer 2 link pointer. 

55 FIGS. 4 and 5 illustrate the look-up processes which the 
device may be required to perform. FIG. 4 illustrates the 
layer 2 (MAC) look-up process, of which the first stage 301 
is a decision whether a layer 2 or a layer 3 look-up should 
be performed. 

60 In the present example, it is assumed for the sake of 
simplicity that no VLANs are used in layer 3 decisions, there 
is no multicast routing support and the layer 3 addresses that 
can be looked up are all of one type (herein called IP). The 
processes shown in FIGS. 3 and 4 can readily be adapted to 

65 more complex requirements. 

A layer 3 decision in the present example requires the 
MAC address to be within a specified range, for the packet 
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type to be IP, and for the checksum (the redundancy data at 
the end of the packet) to indicate a valid packet, i.e. not 
containing errors. A decision tree in these circumstances 
would be: 

If MAC (destination address) is within local range of 5 
MAC addresses 

then if packet type is not IP, then bridge 
if bad check sum, discard (or send to CPU) 
else (good IP) 

do layer 3 look-up jq 

if no match found, use cached associated data 
else 
send to CPU 

else (MAC destination address not matching port des- 
tination address) 15 
bridge 

The foregoing decision process represents stage 301 in 
FIG. 4. If the decision is to perform a layer 3 look-up, the 
process shifts to FIG. 5 to be described later. If there is to be 
a layer 2 look-up, then there is the performance of a hash on 20 
the MAC destination address and the VLAN number as 
shown at stage 302. This enables a reading of the entry in the 
hash table 32. The contents of the entry are latched (stage 
304). The contents of that entry comprises, as indicated 
above, a bit indicating the validity of the data entry and a 25 
pointer to the associated data table. If the valid/invalid bit 
indicates no matching result (stage 306) the look-up has 
failed (but may be followed by a learning cycle). On the 
assumption that the latched contents of the entry indicates a 
valid entry, a data table address pointer may be formed 30 
(stage 307) from a base pointer and the pointer from the 
latched hash table entry. The relevant data table entry is read 
(stage 308) and the contents of that entry are latched (stage 
309). There may at this stage be a validity test (stage 310); 
if the contents are not valid (stage 311) then the look-up 35 
process ceases, but may be followed by a learning cycle (not 
shown). 

It is now necessary to test (stage 312) whether the MAC 
address and the VLAN number in the incoming packet 
correspond to the MAC address and VLAN number indi- 40 
cated in the read entry from the associated data table. If there 
is such a match, stage 313, the associated data (such as the 
destination port) are fed to the switching engine of the ASIC 
(stage 315) and the packet can be forwarded to the port 
indicated thereby. 45 

If the test for identity of MAC address and VLAN 
number, the layer 2 link address pointer (stage 314) allows 
an examination of the entry at the next table address in the 
chain and identified by the link pointer, so that steps 307 
onwards are performed until either a match is found or the 50 
chain of linked addresses is exhausted. 

FIG. 5 illustrates the layer 3 look-up process. Stage 401 
represents a decision to perform the layer 3 look-up. Stage 
402 is the hashing of the IP address by hash function 34 in 
FIG. 3. Stage 403 is a reading of the hash entry in table 35. 55 
The contents of that entry are latched (stage 404). The 
latched data is constituted by a valid/invalid bit and an 
address pointer. Stage 405 is the testing of bit 15 for a valid 
entry. If the entry is invalid the look-up process terminates 
(stage 406), but may be followed by a learning process. If 60 
the entry is valid, then an address pointer for the associated 
data table is formed (stage 407), using the read pointer and 
an ofiset (if required). The relevant entry in the data table is 
read (stage 408) and the contents are latched (stage 409). If 
the latched contents are invalid (stage 410) the look-up 65 
process terminates (stage 411). If the latched contents are 
valid, then a check is made (stage 412) on whether the IP 



address of the packet corresponds to the IP address read from 
the latched table entry. If a match is found, the associated 
data in the entry of the associated data table are fed out to 
the switching engine (stage 413). If there is no match, then 
the link pointer is used to cause examination of the next 
linked entry in the chain (stage 414). 

The foregoing is therefore an example of a network 
device which is capable of both routing and bridging deci- 
sions using a single integrated data table which efficiendy 
includes network addresses and media access control 
addresses, together with, in this example, VLAN numbers, 
and the relevant associated data. 

What is claimed is: 

1. A method of operating a network device in a commu- 
nication system for the transmission of data packets which 
include network addresses identifying sources and destina- 
tions of data, the network device being capable of both 
bridging and routing decisions and including a forwarding 
database by means of which a packet including network 
address data can be forwarded to at least one port and 
thereby to at least one network path identified by a network 
address, and packets can be forwarded to at least one port in 
response to a media access control address, the method 
comprising: 

establishing a data table which contains entries each 
comprising a destination network address of an end 
station to which a packet is destined, a respective media 
access control address and an identification of at least 
one port to which the packet will be directed within the 
device; 

determining whether to access said data table to retrieve 
said identification on the basis of a destination media 
access control address in a received packet or on the 
basis of a destination network address in said packet; 
and 

accessing said data table in response to either said desti- 
nation network address or said destination media access 
control address in dependence on the determination 
whether to access said data table to retrieve said 
identification on the basis of the destination media 
access control address or the destination network 
address, whereby the same table can be used for both 
routing and bridging decisions. 

2. A method according to claim 1 wherein determining 
whether to access said data table to retrieve said identifica- 
tion on the basis of the destination media access control 
address or the destination network address comprises: 

determining whether said destination media access con- 
trol address is within a specified range; 

and said accessing said data table in response to either 
said destination network address or said destination 
media control address comprises performing a look-up 
in said data table to retrieve said identification on the 
basis of said destination media access control address 
in said received packet when said destination media 
access control address falls within said range; and 

performing a look up in said data table on the basis of said 
destination network address of said packet when said 
destination media access control address is outside said 
range. 

3. A method of operating a network device in a commu- 
nication system for the transmission of data packets which 
include network addresses identifying sources and destina- 
tions of data, the network device being capable of both 
bridging and routing decisions and including a forwarding 
database by means of which a packet including network 
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address data can be forwarded to at least one port and 
thereby to at least one network path identified by a network 
address, and packets can be forwarded to at least one port in 
response to a media access control address, the method 
comprising: 5 
establishing a data table which contains entries each 
comprising a destination network address of an end 
station to which a packet is destined, a respective media 
access control address and an identification of at least 
one port to which the packet will be directed within the 10 
device; 

determining whether to access said data table to retrieve 
said identification on the basis of a destination media 
access control address in a received packet or on the 
basis of a destination network address in said packet; 15 
and 

accessing said data table in response to either said desti- 
nation network address or said destination media access 
control address in dependence on the determination 
whether to access said data table to retrieve said 20 
identification on the basis of the destination media 
access control address or the destination network 
address, whereby the same table can be used for both 
routing and bridging decisions; 

wherein determining whether to access said data table to 
retrieve said identification on the basis of the destina- 
tion media access control address or the destination 
network address comprises: 

determining whether said destination media access 
control address is within a specified range; 

said accessing said data table in response to either said 
destination network address or said destination 
media control address comprises performing a look- 
up in said data table to retrieve said identification on 
the basis of said destination media access control 
address in said received packet when said destination 
media access control address falls within said range; 
and 

performing a lookup in said data table on the basis of ^ 
said destination network address of said packet when 
said destination media access control address is 
outside said range; and 
each entry in said data table includes a VLAN number and 
wherein the look-up in said data table on the basis of 45 
said destination media access control comprises access- 
ing the table in response to both the said destination 
media access control address and a VLAN number. 

4. A method according to claim 1 wherein the accessing 
step comprises a hashing step to convert address data to a 50 
pointer to an address in said data table. 

5. A network device for use in a communication system 
for the transmission of data packets which include network 
addresses and/or media access control addresses, the net- 
work device being capable of bridging decisions in response 55 
to media access control addresses and routing decisions in 
response to network addresses, said device including a 
multiplicity of ports for receiving and forwarding data 
packets and a data table for entries each comprising desti- 
nation address data and an identification of a port, whereby ^ 
an incoming packet can be examined for its destination 
address data and be forwarded from the device on the port 
associated with the respective destination address data, 

wherein said data tabic is organised to contain entries each 
including a destination network address, a media access 65 
control address and port identification data; and 

said device includes: 



25 



30 



35 



means for making a decision whether to access said 
data table and to retrieve an identification of said port 
on the basis of either a destination network address 
or a destination media access control address in said 
incoming packet; and 

means for accessing said data table in response to either 
said destination network address or said destination 
media access control address in accordance with said 
decision. 

6. A device according to claim 5 wherein the means for 
accessing comprises two hash tables each containing entries 
each pointing to an address in said data table and further 
comprises means for hashing address data comprising a 
destination network address to access a first of the hash 
tables and means for hashing address data including a 
destination media access control address to access a second 
of the hash tables. 

7. A network device for use in a communication system 
for the transmission of data packets which include network 
addresses and/or media access control addresses, the net- 
work device being capable of bridging decisions in response 
to media access control addresses and routing decisions in 
response to network addresses, said device including a 
multiplicity of ports for receiving and forwarding data 
packets and a data table for entries each comprising desti- 
nation address data and an identification of a port, whereby 
an incoming packet can be examined for its destination 
address data and be forwarded from the device on the port 
associated with the respective destination address data, 

wherein said data table is organised to contain entries each 
including a destination network address, a media access 
control address and port identification data; and 
said device includes: 

means for making a decision whether to access said 
data table and to retrieve an identification of said port 
on the basis of either a destination network address 
or a destination media access control address in said 
incoming packet; 
means for accessing said data table in response to either 
said destination network address or said destination 
media access control address in accordance with said 
decision; 

wherein the means for accessing comprises two hash 
tables each containing entries each pointing to an 
address in said data table and further comprises means 
for hashing address data comprising a destination net- 
work address to access a first of the hash tables and 
means for hashing address data including a destination 
media access control address to access a second of the 
hash tables; and 

each of the entries in the data table includes a VLAN 
number and the said means for hashing address data 
comprising a destination media access control address 
hashes address data including a VLAN number. 

8. A method of operating a network device in a commu- 
nication system for the transmission of data packets which 
include network addresses identifying sources and destina- 
tions of data, the network device being capable of both 
bridging and routing decisions and including a forwarding 
database by means of which a packet including network 
address data can be forwarded to at least one port and 
thereby to at least one network path identified by a network 
address, and packets can be forwarded to at least one port in 
response to a media access control address, the method 
comprising: 

establishing a data table which contains entries each 
comprising a destination network address of an end 
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station to which a packet is destined, a respective media 
access control address and an identification of at least 
one port to which the packet will be directed within the 
device; 

determining in respect of a received packet whether said 5 
received packet can be bridged on the basis of a 
destination media access control address in said 
received packet; 

consequent on a determination that said received packet 
can be bridged, matching said destination media access 10 
control address to a respective media access control 
address in one of said entries and thereby identifying 
said at least one port for the forwarding of the received 
packet; and 

consequent on a determination that said received packet 
cannot be bridged on the basis of said media access 
control destination address in said received packet, 
matching a network destination address in said received 
packet with a network address in one of said entries and 2Q 
thereby identifying a port for the forwarding of said 
received packet, 

whereby the same table is used for both routing and 
bridging decisions. 

9. A network device for use in a communication system 25 
for the transmission of data packets which include network 
addresses and/or media access control addresses, the net- 
work device being capable of bridging decisions in response 
to media access control addresses and routing decisions in 
response to network addresses, said device including: 30 

a multiplicity of ports for receiving and forwarding data 
packets; and 



a data table for entries each comprising destination 
address data and an identification of a port, whereby an 
incoming packet can be examined for its destination 
address data and be forwarded from the device on the 
port associated with the respective destination address 
data, 

wherein said data table is organised to contain entries each 
including a destination network address, a respective 
destination media access control address and port iden- 
tification data; and 

said device includes: 

a look-up engine organized for: 

(i) determining in respect of a received packet 
whether said received packet can be bridged on 
the basis of a media access control destination 
address in said received packet; 

(ii) consequent on a determination that said received 
packet can be bridged, matching said destination 
media access control address to a respective media 
access control address in one of said entries and 
thereby identifying said at least one port for the 
forwarding of said received packet; and 

(iii) consequent on a determination that said received 
packet cannot be bridged on the basis of said 
destination media access control address in said 
received packet, matching a destination network 
address in said received packet with a network 
address in one of said entries and thereby identi- 
fying a port for the forwarding of said received 
packet. 
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